CN105471927A - Method for processing service routing message, and service node - Google Patents

Abstract

The invention discloses a method for processing service routing messages, comprising: a socket unit in a service node SN creates a first socket, and the first socket is used to monitor the first message , the first message includes service routing information and a message to be processed; storing the correspondence between the message to be processed and a second socket, wherein the second socket corresponds to the service routing information ; Receive a message acquisition request from the application program unit in the SN, and determine that the message to be processed is a requested message according to the message acquisition request and the corresponding relationship; by sending the message to the application program unit Sending the message to be processed to the application program unit according to the manner of responding to the message acquisition request. The method for processing the service routing message provided by the embodiment of the present invention can prevent the relevant information of the service routing from being exposed to the application program units in the SN, and improve the security of the service routing.

Description

Method and service node for processing service routing message

technical field

The invention relates to the technical field of data processing, in particular to a method and a service node for processing service routing messages.

Background technique

Service Chaining (ServiceChaining in English) technology is a forwarding technology that guides network service packets to pass through multiple service nodes (ServiceNode in English, abbreviated as SN in English). Called business routing.

At present, when a service message is forwarded between SNs, the original message needs to be encapsulated in a service routing header. The service routing header is used to guide the forwarding behavior of the service message. Data (metadata in English), and metadata can be generated by a service router (ServiceRouter in English, abbreviated as SR) or by the SN itself, and can be modified.

The ingress message standards of the SN can be roughly divided into two categories, one is: when the message arriving at the SN is an original message, the SN can directly receive, process and send it. The other type is: the message arriving at the SN is a service routing message with service routing header information and metadata. At this time, the SN needs to be able to identify and strip the service routing header when receiving the service routing message. After the packet processing is completed, the original packet can be encapsulated with an appropriate service routing header and sent to the SR.

In the existing technical solution, the application (Application in English, APP for English abbreviation) layer in the SN directly obtains the service routing message through the network driver layer, strips the service routing header by itself, identifies and processes the original message, and after the processing is completed, the APP The layer encapsulates the appropriate service routing header for the packet by itself, and sends it out through the network driver layer.

The inventors of the present invention found that in the prior art, all relevant information of service routing is exposed to the APP layer, which has potential security risks.

Contents of the invention

The embodiment of the present invention provides a method for processing the service routing message. The socket unit in the service node SN can process the service routing information on the service routing message, and the application program unit in the SN does not need to know the service routing information. The routing related information is only processed for the business, thereby preventing the business routing related information from being exposed to the application unit in the SN, and improving the security of the business routing. The embodiment of the present invention also provides a corresponding service node.

The first aspect of the present invention provides a method for processing service routing packets, including:

The socket unit in the service node SN creates a first socket, and the first socket is used to monitor the first message, and the first message is a service routing message belonging to the first service routing type The first message includes service routing information and a message to be processed;

The socket unit determines according to the first socket that the SN has received the first message;

The socket unit saves the corresponding relationship between the message to be processed and a second socket, wherein the second socket corresponds to the service routing information;

The socket unit receives a message acquisition request from the application program unit in the SN, and the message acquisition request is used to request the pending message corresponding to the second socket;

The socket unit determines that the message to be processed is a requested message according to the message acquisition request and the corresponding relationship;

The socket unit sends the message to be processed to the application program unit by sending a response to the message acquisition request to the application program unit.

With reference to the first aspect, in a first possible implementation manner, the method further includes:

The socket unit receives the processed message corresponding to the second socket from the application program unit, and the processed message is processed by the application program unit on the message to be processed obtained;

The socket unit determines the service routing information according to the second socket corresponding to the processed message;

Sending a second packet to the service router SR, where the second packet is a service routing packet including the processed packet, and the service routing information of the second packet includes the service routing information.

With reference to the first aspect or the first possible implementation of the first aspect, in a second possible implementation, the socket unit saves the corresponding relationship between the message to be processed and the second socket Specifically include:

When the socket unit receives the first message, if the second socket is not saved in the socket unit, create the second socket, and store the pending The processed message is added to the message queue corresponding to the second socket.

With reference to the first aspect or the first possible implementation of the first aspect, in a third possible implementation, the socket unit stores the corresponding relationship between the message to be processed and the second socket Specifically include:

When the socket unit receives the first message, if the second socket is stored in the socket unit, add the message to be processed to the second In the message queue corresponding to the socket.

With reference to the first aspect, any one of the first to the third possible implementations of the first aspect, in a fourth possible implementation, the socket unit receives from the application unit in the SN Before receiving the packet acquisition request including the second socket, the method further includes:

The socket unit sends the second socket to the application unit.

With reference to the first aspect, any one of the first to fourth possible implementations of the first aspect, in a fifth possible implementation, the socket unit sends a target The manner in which the message obtains a response to the request is to send the message to be processed to the application program unit, including:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the storage address of the message to be processed;

The application program unit obtains the message to be processed according to the storage address.

With reference to the first aspect, any one of the first to the fifth possible implementations of the first aspect, in a sixth possible implementation, the socket unit sends a target The manner in which the message obtains a response to the request is to send the message to be processed to the application program unit, including:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the message to be processed.

The second aspect of the present invention provides a service node, including: a socket unit and an application program unit;

The socket unit includes:

Create a subunit, used to create a first socket, the first socket is used to monitor the first message, the first message is a service routing message belonging to the first service routing type, so The first message includes service routing information and messages to be processed;

a determining subunit, configured to determine, according to the first socket created by the creating subunit, that the SN has received the first message;

A saving subunit, configured to save the correspondence between the message to be processed and a second socket, where the second socket corresponds to the service routing information;

a receiving subunit, configured to receive a message acquisition request from an application program unit in the SN, where the message acquisition request is used to request the pending message corresponding to the second socket;

The determining subunit is further configured to determine that the message to be processed is a requested message according to the message acquisition request received by the receiving subunit and the correspondence stored by the saving subunit;

The sending subunit is configured to send the message to be processed determined by the determining subunit to the application program unit by sending a response to the message acquisition request to the application program unit.

In combination with the second aspect, in the first possible implementation,

The receiving subunit is further configured to receive a processed message corresponding to the second socket from the application program unit, and the processed message is processed by the application program unit to the message to be processed obtained by processing the text;

The determining subunit is further configured to determine the service routing information according to the second socket corresponding to the processed message received by the receiving subunit;

The sending subunit is further configured to send a second message to the service router SR, the second message is a service routing message including the processed message, and the service routing information of the second message includes The service routing information determined by the determining subunit.

In combination with the second aspect or the first possible implementation of the second aspect, in the second possible implementation,

The creating subunit is further configured to create the second socket if the second socket is not saved in the saving subunit when the receiving subunit receives the first message Character;

The saving subunit is specifically configured to add the message to be processed to the message queue corresponding to the second socket created by the creating subunit.

In combination with the second aspect or the first possible implementation of the second aspect, in the third possible implementation,

The saving subunit is specifically configured to save the message to be processed if the second socket is saved in the saving subunit when the receiving subunit receives the first message Add to the message queue corresponding to the second socket.

In combination with the second aspect, any one of the first to third possible implementations of the second aspect, in a fourth possible implementation,

The sending subunit is further configured to send the second socket to the application program unit before receiving the packet acquisition request including the second socket from the application program unit in the SN.

In combination with the second aspect, any one of the first to fourth possible implementations of the second aspect, in a fifth possible implementation,

The sending subunit is configured to send a response to the message acquisition request to the application program unit, the response carrying the storage address of the message to be processed;

The application unit is configured to obtain the message to be processed according to the storage address.

In combination with the second aspect, any one of the first to fifth possible implementations of the second aspect, in a sixth possible implementation,

The sending subunit is configured to send a response to the message acquisition request to the application program unit, the response carrying the message to be processed.

The socket unit in the service node SN in the embodiment of the present invention creates a first socket, and the first socket is used to monitor the first message, and the first message belongs to the first service routing type A service routing message, the first message includes service routing information and a message to be processed; the socket unit determines according to the first socket that the SN has received the first message; The socket unit saves the corresponding relationship between the message to be processed and the second socket, wherein the second socket corresponds to the service routing information; the socket unit obtains from the SN The application program unit receives a message acquisition request, and the message acquisition request is used to request the pending message corresponding to the second socket; the socket unit according to the message acquisition request and The corresponding relationship determines that the message to be processed is a requested message; the socket unit sends a response to the message acquisition request to the application program unit, Send the message to be processed. Compared with the related information of service routing in the prior art, which is all exposed to the APP layer and has security risks, the method for processing service routing messages provided by the embodiment of the present invention can be processed by the socket unit in the service node SN. The service routing message is used to process the service routing information, and the application unit in the SN does not need to know the relevant information of the service route, but only processes the service, thereby avoiding the exposure of the relevant information of the service route to the application program unit in the SN, and improving the Security of service routing.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without any creative effort.

FIG. 1 is a schematic diagram of an embodiment of a method for processing a service routing message in an embodiment of the present invention;

FIG. 2 is a schematic diagram of an embodiment of a method for processing a service routing message in an embodiment of the present invention;

FIG. 3 is a schematic diagram of an embodiment of a method for processing a service routing message in an embodiment of the present invention;

Fig. 4 is a schematic diagram of a service node in an embodiment of the present invention;

Fig. 5 is a schematic diagram of a service node in an embodiment of the present invention.

detailed description

The embodiment of the present invention provides a method for processing the service routing message, the socket unit in the service node SN can process the service routing information on the service routing message, and the application program unit in the SN will not know about the service routing Relevant information only processes services, thereby avoiding exposure of relevant information of service routing to application program units in the SN, and improving the security of service routing. The embodiment of the present invention also provides a corresponding service node. Each will be described in detail below.

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts fall within the protection scope of the present invention.

Referring to Fig. 1, an embodiment of a method for processing a service routing message provided by an embodiment of the present invention includes:

The embodiment of the present invention provides a new first socket (socket in English) protocol family, which is used to assist the application layer in the driver layer to complete the partial processing of service routing messages, and the new service routing socket protocol family can be Named AF_SR, of course, can also be named with other names.

When the service router SR transmits service routing messages with the service node SN, the embodiment of the present invention introduces a set of new service routing socket protocol stacks in the SN. , the English abbreviation is API) set is defined as SRsocketAPI.

The processing module of the API is a service router socket module (SRsocketModule in English), hereinafter referred to as SRM.

As shown in Figure 1, the service node SN includes two parts, one part is a socket unit, the other part is an application program unit, and the socket unit includes two parts: SRsocketAPI and SRM.

Referring to FIG. 2, an embodiment of the method for processing service routing packets provided by the embodiment of the present invention includes:

S100. The socket unit 301 in the service node SN30 creates a first socket.

The first socket is used to monitor the first message, the first message is a service routing message belonging to the first service routing type, and the first message includes service routing information and pending messages arts.

The specific process of creating the first socket by the socket unit 301 may include the following content.

The application program unit 302 sends the first socket creation instruction to the socket unit 301. This step can be understood in conjunction with FIG. 1 as: the application program unit invokes the service routing socketAPI in the SRsocketAPI.

The socket unit 301 creates the first socket according to the first socket creation instruction.

After the socket unit 301 creates the first socket, it can start to receive the first message belonging to the first service routing type, and the instruction for receiving the first message can be called by the application program unit 302 through the first socket The instruction is triggered to the socket unit 301, and after receiving the invocation instruction of the first socket, the socket unit 301 can know that the first packet of the first service route type can be received.

For example, the service routing type in this embodiment of the present invention may be: the transmission type and/or transmission mode of the service routing bearer layer.

Usually, an application program unit has the ability to process the packets to be processed in the service routing packets belonging to one service routing type. Of course, it may also have the capability to process the packets to be processed in the service routing packets belonging to multiple service routing types. Processing capacity, there can be multiple application program units in one SN.

The specific process of creating the first socket by the socket unit 301 may also include: instead of initiating the creation process by the application unit, the socket unit actively creates the first socket according to the first service route type Character. For example, the socket unit may actively create the first socket after the SN where it is located is started, or may actively create the first socket after a certain predetermined time is reached.

In addition, the socket unit 301 may also create the first socket according to an instruction of a controller in the network.

The process of creating the first socket may include the operation of creating a socket, and may further include the operation of configuring the created socket.

S102. The service router SR40 sends the first packet to the service node 30.

S105. The socket unit 301 determines according to the first socket that the SN30 has received the first packet.

The first socket corresponds to the first service routing type, and the first message is a service routing message belonging to the first service routing type. When the service routing type of the message received by the socket unit 301 is the first service If the routing type is not specified, then it can be determined that the packet is the first packet.

Optionally, the socket unit 301 starts to receive the first packet of the first service route type from the SR after learning the first service route type.

Referring to FIG. 1, this step can be understood as: the SRM receives the first message from the SR according to the first service route type.

S110. When receiving the first message, the socket unit determines whether the second socket is stored in the socket unit. If not, execute step S115, and if yes, execute step S120.

In the embodiment of the present invention, the second socket is attached to the first socket, the first socket corresponds to the first service routing type, and the second socket corresponds to a session that should belong to the first service routing type. There may be multiple sessions all belonging to the first service routing type.

In the embodiment of the present invention, after receiving the first message, the socket unit may analyze the first message and separate the service routing information in the first message from the message to be processed, or The process of separating may not be performed.

The service routing information is carried in the service routing header of the first message, and the message to be processed may include an original message without any routing information, or may include an original message and metadata without any routing information.

Referring to FIG. 1, this step can be understood as a process performed by the SRM.

S115. If the second socket is not stored in the socket unit, create the second socket, and add the message to be processed to the corresponding in the message queue.

The corresponding relationship between service routing information and the second socket is unique, and each service routing information will uniquely correspond to a second socket. A service routing information can correspond to multiple pending messages, and a queue of pending messages can be established for a second socket, and all pending messages under the same service routing information are stored in the queue .

You can refer to the service route mapping table provided in Table 1 to understand the corresponding relationship between the second socket, service route type, service route information and message queue to be processed.

Table 1: Service routing mapping table

second socket Service Routing Information queue of pending messages 1 Service Routing Information 1 Q1 2 Service Routing Information 2 Q2 3 Service Routing Information 3 Q3 … … … N Service routing information N QN

It can be seen from Table 1 that each second socket corresponds to a piece of service routing information, and the service routing information must belong to the first service routing type in S100. Each second socket identifier also corresponds to a queue of all pending packets under the service routing information.

When the socket unit determines that the service routing information in the first message does not exist in the socket unit, it can be understood that there is no entry for the service routing information in Table 1. Table 1 establishes an entry corresponding to the service routing information.

Referring to FIG. 1, this step can be understood as a process performed by the SRM.

Table 1 may also include service routing types, and after adding service routing types, you can refer to Table 2 for understanding.

Table 2: Business routing mapping table

second socket Service routing type Service Routing Information queue of pending messages 1 Type1 Service Routing Information 1 Q1 2 Type2 Service Routing Information 2 Q2 3 Type3 Service Routing Information 3 Q3 … … … … N Type N Service routing information N QN

S120. When the socket unit receives the first message, if the second socket is stored in the socket unit, add the message to be processed to the In the message queue corresponding to the second socket.

When the service routing information exists in the socket unit, it can be understood that the table entry of the service routing information already exists in Table 1, and it does not need to be re-established, only the message to be processed needs to be stored in the In the queue of pending packets corresponding to the service routing information. For example: when the corresponding relationship between the second socket 1 and the message queue Q1 is stored in Table 1, the pending message may be added to the Q1 queue.

Referring to FIG. 1, this step can be understood as a process performed by the SRM.

S125. The socket unit 301 sends the second socket to the application program unit 302.

This step may be: the socket unit 301 receives the second socket acquisition instruction sent by the application program unit 302, and then the socket unit 301 sends the instruction to the application program unit according to the second socket acquisition instruction. 302 Send the second socket.

For example: when the application program unit 302 needs to process a message to be processed, it first sends a second socket acquisition instruction to the socket unit.

This step can be understood in conjunction with FIG. 1 as: the application program unit calls the second socket creation interface in SRsocketAPI.

After receiving the second socket acquisition instruction, the socket unit 301 usually sends the second socket identification to the application program unit 302 in the order in which the second sockets are generated.

Of course, other preset strategies are also possible, for example: first send the second socket with an odd number, and then send the second socket with an even number.

Referring to FIG. 1, this step can be understood as a process performed by the SRM.

The socket unit sending the second socket to the application unit may further include: after the socket unit 301 generates the second socket, if the second socket acquisition is not received In the case of an instruction, actively send the second socket to the application unit 302.

S130. The socket unit 301 receives a message acquisition request from the application program unit 302 in the SN, and the message acquisition request is used to request the pending message corresponding to the second socket .

The message acquisition request in the embodiment of the present invention may directly carry the message acquisition request, or may not carry the second socket, but the socket unit 301 obtains the request from the corresponding second socket The dedicated interface of the device receives the packet acquisition request. Through the above two methods, the socket unit 301 can determine the relationship between the request and the second socket, that is, to request the pending message corresponding to the second socket.

S135. The socket unit 301 determines, according to the packet acquisition request and the correspondence relationship, that the packet to be processed is a requested packet.

The socket unit first determines the second socket according to the message acquisition request, and then determines the second socket according to the second socket, the second socket and the message to be processed The corresponding relationship can determine the message to be processed corresponding to the second socket. Since the message to be processed is stored in the message queue, the corresponding relationship between the second socket and the message to be processed may also be expressed as the relationship between the second socket and the Correspondence between message queue IDs. Correspondingly, the message to be processed may be determined according to the second socket and the corresponding relationship between the second socket and the message queue identifier. For example, according to the second socket 1, it can be determined that the pending packets in the packet queue Q1 are requested packets.

S140. The socket unit sends the message to be processed to the application program unit by sending a response to the message acquisition request to the application program unit.

A scheme of step S140 may be:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the storage address of the message to be processed; the application program unit obtains the message according to the storage address The pending message. In this way, the socket unit and the application program unit do not need to directly transmit the data to be processed, and the response speed for the request can be improved.

Another scheme of step S140 may be:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the message to be processed. In this solution, the socket unit may directly carry the message to be processed in the response to the request, and the application program unit does not need to search for the message to be processed.

Because there can be many pending packets in a packet queue, when sending the response to the packet acquisition request, it can be sent according to the order in which the packets to be processed are stored in the packet queue, and the queue is sent first. The response to the pending packets until the queue of pending packets is sent.

Referring to FIG. 1, this step can be understood as a process performed by the SRM.

S145. The application program unit 302 processes the message to be processed into a processed message.

After the application program unit obtains the message to be processed, it processes the message to be processed into a processed message.

S150. The socket unit 301 receives from the application program unit 302 a processed message corresponding to the second socket.

The processed message is obtained by the application program unit 302 processing the message to be processed.

A solution for the socket unit 301 to receive the processed message corresponding to the second socket from the application program unit 302 may be:

The socket unit 301 receives a message or message including the storage address of the processed message and the second socket from the application unit 302, and may also receive a message including the processed message itself and the second socket words or messages. Since both the processed message and the second socket are obtained by the socket unit 301, the socket unit 301 can determine that the processed message and the second socket are corresponding .

Another solution for the socket unit 301 to receive the processed message corresponding to the second socket from the application program unit 302 may also be: the socket unit 301 receives from the application program unit 302 The second socket dedicated interface between receives the storage address of the processed message or the processed message, and determines whether the processed message is related to the first socket according to the dedicated interface of the second socket The two sockets correspond to each other.

S155. The socket unit 301 determines the service routing information according to the second socket corresponding to the processed packet.

As shown in Table 1, when the second socket is determined, the corresponding service routing information can be determined. For example, when the second socket is 1, the corresponding service routing information can be determined as service routing information 1.

S160. The socket unit sends a second message to the service router SR, where the second message is a service routing message including the processed message, and the service routing information of the second message includes the service routing information.

The socket unit 301 may use the service routing information determined in step S155 to encapsulate the processed message, or directly send the processed message and the service routing information to the SR without encapsulation, but The processed packets and the service routing information need to be identified separately, so that the SR40 can separately identify the processed packets and the service routing information.

It should be noted that steps S130 to S140 are not in sequence with steps S150 to S160. For different service routing packets, steps S130 to S140 and steps S150 to S160 can be executed at the same time, or steps S150 to S160 can be executed first.

S170. The socket unit 301 receives the second socket closing instruction sent by the application program unit 302.

The second socket closing instruction may carry the second socket, or the second socket closing instruction may be received through a dedicated interface of the second socket.

S175. The socket unit 301 deletes the correspondence between the second socket under the first service routing type, the service routing information, and the message queue according to the second socket closing instruction.

After a session ends, if the application unit instructs to close the session, the entry in Table 1 or Table 2 related to the session may be deleted.

S180. The socket unit 301 receives the first socket closing instruction sent by the application program unit 302.

The first socket close instruction may carry the first service route type, or may not carry the first service route type, but the second socket close instruction is received through the dedicated interface of the first socket instruction.

S185. According to the first socket closing instruction, delete the corresponding relationship with the second socket under the first service routing type, service routing information, and message queue.

If the application unit instructs to close the created service routing socket, delete the entry in Table 1 or Table 2 related to the first service routing type.

The service node SN30 and the service router SR in this embodiment may be two independent physical devices, or two virtual devices implemented in the same physical device or physical system. In addition, with the development of technology, the names of service nodes and service routers may change. Therefore, as long as a physical or virtual device executes the operation performed by the service node SN30 in this embodiment, even if the name of the physical or virtual device is not "service node", it should be understood as The service node SN30 in the embodiment of the present invention. The determination standard of the service router is the same as that of the service node 30, that is, as long as a device executes the operations performed by the service router SR40 in this embodiment, then this device should be understood as a service router. Whether a target device can be understood as the device in this embodiment has nothing to do with the name of the target device in the industry, but is related to the operations performed and functions possessed by the target device.

Compared with the related information of service routing in the prior art, which is all exposed to the APP layer and has security risks, the method for processing service routing messages provided by the embodiment of the present invention can be processed by the socket unit in the service node SN. The service routing message is used to process the service routing information, and the application unit in the SN does not need to know the relevant information of the service route, but only processes the service, thereby avoiding the exposure of the relevant information of the service route to the application program unit in the SN, and improving the Security of service routing.

Referring to FIG. 3, another embodiment of a method for processing service routing packets provided by an embodiment of the present invention includes:

201. The socket unit in the service node SN creates a first socket, the first socket is used to monitor the first message, and the first message is a service belonging to the first service routing type Routing packets, the first packet includes service routing information and packets to be processed.

202. The socket unit determines according to the first socket that the SN has received the first packet.

203. The socket unit stores the correspondence between the packet to be processed and a second socket, where the second socket corresponds to the service routing information.

204. The socket unit receives a packet acquisition request from the application program unit in the SN, where the packet acquisition request is used to request the pending packet corresponding to the second socket.

205. The socket unit determines, according to the packet acquisition request and the correspondence relationship, that the packet to be processed is a requested packet.

206. The socket unit sends the message to be processed to the application program unit by sending a response to the message acquisition request to the application program unit.

The socket unit in the service node SN in the embodiment of the present invention creates a first socket, and the first socket is used to monitor the first message, and the first message belongs to the first service routing type A service routing message, the first message includes service routing information and a message to be processed; the socket unit determines according to the first socket that the SN has received the first message; The socket unit saves the corresponding relationship between the message to be processed and the second socket, wherein the second socket corresponds to the service routing information; the socket unit obtains from the SN The application program unit receives a message acquisition request, and the message acquisition request is used to request the pending message corresponding to the second socket; the socket unit according to the message acquisition request and The corresponding relationship determines that the message to be processed is a requested message; the socket unit sends a response to the message acquisition request to the application program unit, Send the message to be processed. Compared with the related information of service routing in the prior art, which is all exposed to the APP layer and has security risks, the method for processing service routing messages provided by the embodiment of the present invention can be processed by the socket unit in the service node SN. The service routing message is used to process the service routing information, and the application unit in the SN does not need to know the relevant information of the service route, but only processes the service, thereby avoiding the exposure of the relevant information of the service route to the application program unit in the SN, and improving the Security of service routing.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 , in another embodiment of the method for processing service routing packets provided by the embodiment of the present invention, the method may further include:

The socket unit receives the processed message corresponding to the second socket from the application program unit, and the processed message is processed by the application program unit on the message to be processed obtained;

The socket unit determines the service routing information according to the second socket corresponding to the processed message;

Sending a second packet to the service router SR, where the second packet is a service routing packet including the processed packet, and the service routing information of the second packet includes the service routing information.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 or an optional embodiment, in another embodiment of the method for processing packets provided by the embodiment of the present invention, the socket unit saves the pending The correspondence between the message and the second socket may specifically include:

When the socket unit receives the first message, if the second socket is not saved in the socket unit, create the second socket, and store the pending The processed message is added to the message queue corresponding to the second socket.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 or an optional embodiment, in another embodiment of the method for processing packets provided by the embodiment of the present invention, the socket unit saves the pending The correspondence between the message and the second socket may specifically include:

When the socket unit receives the first message, if the second socket is stored in the socket unit, add the message to be processed to the second In the message queue corresponding to the socket.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 or an optional embodiment, in another embodiment of the method for processing packets provided by the embodiment of the present invention, the socket unit obtains from the SN Before the application program unit receives the packet acquisition request including the second socket, the method may further include:

The socket unit sends the second socket to the application unit.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 or an optional embodiment, in another embodiment of the method for processing packets provided by the embodiment of the present invention, the socket unit sends the application The manner in which the program unit sends a response to the message acquisition request, sending the message to be processed to the application program unit may include:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the storage address of the message to be processed;

The application program unit obtains the message to be processed according to the storage address.

Optionally, on the basis of the above-mentioned embodiment corresponding to FIG. 3 or an optional embodiment, in another embodiment of the method for processing packets provided by the embodiment of the present invention, the socket unit sends the application The manner in which the program unit sends a response to the message acquisition request, sending the message to be processed to the application program unit may include:

The socket unit sends a response to the message acquisition request to the application program unit, and the response carries the message to be processed.

The method for processing service routing packets described in the embodiments of the present invention can be understood by referring to the descriptions in FIG. 1 and FIG. 2 , and will not be described in detail in the embodiments of the present invention.

FIG. 4 is a schematic diagram of the service node SN30 provided by the embodiment of the present invention. The service node SN30 shown in FIG. 4 is the service node SN30 shown in FIGS. 1 and 2 , and may also be the service node in the embodiment corresponding to FIG. 3 . Each unit and subunit in the schematic diagram can be understood as a logical unit divided according to different logical functions. The service node SN30 includes a socket unit 301 and an application program unit 302 .

The socket unit 301 includes:

Create subunit 3011, configured to create a first socket, the first socket is used to monitor the first message, the first message is a service routing message belonging to the first service routing type, The first message includes service routing information and a message to be processed, and the first message may be sent to the service node SN30 by the service router SR40, and the service node SN30 and the service router SN40 belong to the same system;

A determining subunit 3012, configured to determine according to the first socket created by the creating subunit 3011 that the SN has received the first message;

The saving subunit 3013 is configured to save the corresponding relationship between the message to be processed and the second socket, where the second socket corresponds to the service routing information;

The receiving subunit 3014 is configured to receive a message acquisition request from the application program unit 302 in the SN, where the message acquisition request is used to request the pending message corresponding to the second socket;

The determining subunit 3012 is further configured to determine that the message to be processed is a requested message according to the message acquisition request received by the receiving subunit 3014 and the corresponding relationship stored by the saving subunit ;

The sending subunit 3015 is configured to send the message to be processed determined by the determining subunit to the application program unit by sending a response to the message acquisition request to the application program unit 302 .

The above content can be understood as the first part of the content of SN30 shown in FIG. 4 .

According to the above content, it can be seen that, compared with the related information of service routing in the prior art, which is all exposed to the APP layer and has potential safety hazards, the embodiment of the present invention provides that the service node SN can use the socket unit to perform service routing information on service routing messages. The application unit in the SN does not need to know the relevant information of the service routing, but only processes the service, thereby avoiding the exposure of the relevant information of the service route to the application unit in the SN, and improving the security of the service routing.

This embodiment may further include a first option, where the first option includes the first part of the content of the SN30. In addition, in the first optional solution, the receiving subunit 3014 is further configured to receive from the application program unit 302 a processed packet corresponding to the second socket, the processed packet is generated by obtained by the application program unit processing the message to be processed; the determining subunit 3012 is further configured to, according to the second a socket to determine the service routing information; the sending subunit 3015 is also configured to send a second message to the service router SR, where the second message is a service routing message including the processed message, The service routing information of the second packet includes the service routing information determined by the determining subunit 3012.

This embodiment may further include a second option, where the second option includes the first part of the content of the SN30 or the first option. In addition, in the second optional solution, the creating subunit 3011 is further configured to, when the receiving subunit 3014 receives the first message, if the saving subunit 3013 does not save the second socket, create the second socket; the saving subunit 3013 is specifically configured to add the message to be processed to the second socket corresponding to the creation subunit 3011 in the message queue.

This embodiment may further include a third option, where the third option includes the first part of the content of the SN30, the first option or the second option. In addition, in the third optional solution, the storing subunit 3013 is specifically configured to, when the receiving subunit 3014 receives the first message, if the storing subunit 3013 stores the second socket, add the message to be processed to the message queue corresponding to the second socket.

This embodiment may further include a fourth option, the fourth option includes the first part of the content of the SN30, the first option, the second option or the third option Program. In addition, in the fourth optional solution, the sending subunit 3015 is further configured to send the application program The unit sends the second socket.

This embodiment may further include a fifth option, the fifth option includes the first part of the content of the SN30, the first option, the second option, and the third option scheme or the fourth alternative. In addition, in a fifth optional solution, the sending subunit 3015 is configured to send a response to the message acquisition request to the application program unit, where the response carries the storage address of the message to be processed; The application program unit 302 is configured to obtain the message to be processed according to the storage address.

Based on the content of the first part of the above SN30 or any optional solution, the sending subunit 3015 is configured to send a response to the message acquisition request to the application program unit 302, and the response carries the to-be-processed message.

The service nodes described in the embodiments of the present invention can be understood by referring to the descriptions in FIG. 1 and FIG. 2 , and will not be described in detail in the embodiments of the present invention.

It should be noted that the service node 30 shown in FIG. 4 can realize all operations and functions of the service node 30 shown in FIG. 1 and FIG. 2 and the service node in the embodiment corresponding to FIG. 3 . Since FIG. 4 shows a service node from the perspective of logical functions, all the operations and functions described above can be jointly implemented by the units and subunits shown in FIG. 4 . As for which unit and sub-unit are specifically implemented by the above-mentioned all operations and functions, this is only a logical division, that is, to divide or supplement the operation of the service node 30 in FIG. 1, FIG. 2 or FIG. 3 into a logical unit Among them, the division method is very flexible. Any division method should be regarded as a part of this embodiment.

FIG. 5 is a schematic structural diagram of a service node 30 . The service node 30 may include an input device 310 , an output device 320 , a processor 330 and a memory 340 . The service node 30 shown in FIG. 5 and the service node 30 shown in FIG. 4 may be the same service node, but FIG. 4 embodies this service node from the perspective of logical functions, while FIG. 5 embodies it from the perspective of physical implementation This business node.

Memory 340 may include read-only memory and/or random-access memory, and provides instructions and data to processor 330 . A portion of memory 340 may also include non-volatile random access memory (NVRAM).

The memory 340 stores the following elements, executable modules or data structures, or their subsets, or their extended sets:

Operation instructions: include various operation instructions for realizing various operations.

Operating system: includes various system programs for implementing various basic services and processing hardware-based tasks.

In the embodiment of the present invention, the processor 330 executes the following operations by calling the operation instruction stored in the memory 340 (the operation instruction can be stored in the operating system):

Create a first socket, the first socket is used to monitor the first message, the first message is a service routing message belonging to the first service routing type, and the first message includes Service routing information and pending packets;

determining, according to the first socket, that the SN has received the first message;

storing the corresponding relationship between the message to be processed and the second socket through the memory 340, wherein the second socket corresponds to the service routing information;

receiving a packet acquisition request from the application program unit in the SN through the input device 310, where the packet acquisition request is used to request the pending packet corresponding to the second socket;

The socket unit determines that the message to be processed is a requested message according to the message acquisition request and the corresponding relationship;

The message to be processed is sent to the application program unit by means of the output device 320 sending a response to the message acquisition request to the application program unit.

The socket unit in the service node SN provided by the embodiment of the present invention processes the service routing information on the service routing message, and the application program unit in the SN does not need to know the relevant information of the service routing, but only processes the service, thereby avoiding The relevant information of the service routing is exposed to the application unit in the SN, which improves the security of the service routing.

The processor 330 controls the operation of the service node SN30, and the processor 330 may also be called a CPU (Central Processing Unit, central processing unit). Memory 340 may include read-only memory and random-access memory, and provides instructions and data to processor 330 . A portion of memory 340 may also include non-volatile random access memory (NVRAM). In a specific application, various components of the service node SN30 are coupled together through the bus system 350, wherein the bus system 350 may include a power bus, a control bus, and a status signal bus in addition to a data bus. However, for clarity of illustration, the various buses are labeled as bus system 350 in the figure.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 330 or implemented by the processor 330 . The processor 330 may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 330 or instructions in the form of software. The above-mentioned processor 330 may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in connection with the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 340, and the processor 330 reads the information in the memory 340, and completes the steps of the above method in combination with its hardware.

Optionally, the input device 310 is further configured to receive a processed message corresponding to the second socket from the application program unit, and the processed message is generated by the application program unit to the Obtained by processing the pending message;

The processor 330 is further configured to determine the service routing information according to the second socket corresponding to the processed message;

The output device 320 is further configured to send a second packet to the service router SR, the second packet is a service routing packet including the processed packet, and the service routing information of the second packet includes the The service routing information described above.

Optionally, the processor is specifically configured to, when the socket unit receives the first message, if the second socket is not saved in the socket unit, create the the second socket;

The memory 340 is specifically configured to add the message to be processed to the message queue corresponding to the second socket.

Optionally, the memory 340 is specifically configured to, when the socket unit receives the first message, if the second socket is stored in the socket unit, store the Add the message to be processed to the message queue corresponding to the second socket.

Optionally, the output device 320 is configured to send the second socket to the application unit.

Optionally, the output device 320 is specifically used for the socket unit to send a response to the message acquisition request to the application program unit, where the response carries the storage address of the message to be processed;

The application program unit obtains the message to be processed according to the storage address.

Optionally, the output device 320 is specifically configured to send a response to the message acquisition request to the application program unit, where the response carries the message to be processed.

In addition, the socket unit 301 and the application program unit 302 in the service node 30 shown in FIG. 4 can be considered to be implemented by the processor 330 according to the readable instructions stored in the memory 340 and the data to be used. The memory 340 can store all the instructions and data required to implement the socket unit 301 and the application program unit 302 . The processing reads the corresponding instructions, and operates according to the instructions, so as to realize the socket unit 301 and the application program unit 302 .

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium can include: ROM, RAM, disk or CD, etc.

The method and service nodes for processing service routing messages provided by the embodiments of the present invention have been described above in detail. In this paper, specific examples are used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only used To help understand the method of the present invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. In summary, this specification The content should not be construed as a limitation of the invention.

Claims (14)

1., to the method that business route message processes, it is characterized in that, comprising:

Socket unit in service node SN creates the first socket, described first socket is used for monitoring the first message, described first message is the business route message belonging to the first business route-type, and described first message comprises business routing iinformation and clear text;

According to described first socket, described socket unit determines that described SN receives described first message;

Described socket unit preserves the corresponding relation of described clear text and the second socket, and wherein said second socket is corresponding with described business routing iinformation;

Described socket unit receives Receive message request from the application program unit described SN, and described Receive message request is for asking the described clear text corresponding with described second socket;

According to described Receive message request and described corresponding relation, described socket unit determines that described clear text is requested message;

Described socket unit, by sending the mode for the response of described Receive message request to described application program unit, sends described clear text to described application program unit.

2. method according to claim 1, is characterized in that, described method also comprises:

Described socket unit receives the processed message corresponding with described second socket from described application program unit, and described processed message is processed described clear text by described application program unit and obtains;

Described socket unit, according to described second socket corresponding with described processed message, determines described business routing iinformation;

Send the second message to business router SR, described second message is the business route message comprising described processed message, and the business routing iinformation of described second message comprises described business routing iinformation.

3. method according to claim 1 and 2, is characterized in that, the corresponding relation that described socket unit preserves described clear text and described second socket specifically comprises:

Described socket unit, when receiving described first message, if do not preserve described second socket in described socket unit, then creates described second socket, and is added in the message queue corresponding with described second socket by described clear text.

4. method according to claim 1 and 2, is characterized in that, the corresponding relation that described socket unit preserves described clear text and described second socket specifically comprises:

Described clear text, when receiving described first message, if preserve described second socket in described socket unit, is then added in the message queue corresponding with described second socket by described socket unit.

5. method according to any one of claim 1 to 4, is characterized in that, described socket unit from described SN application program unit receive comprise the Receive message request of described second socket before, described method also comprises:

Described socket unit sends described second socket to described application program unit.

6. method according to any one of claim 1 to 5, it is characterized in that, described socket unit, by sending the mode for the response of described Receive message request to described application program unit, sends described clear text to described application program unit, comprising:

Described socket unit sends the response for described Receive message request to described application program unit, carries the memory address of described clear text in described response;

Described application program unit, according to described memory address, obtains described clear text.

7. method according to any one of claim 1 to 6, it is characterized in that, described socket unit, by sending the mode for the response of described Receive message request to described application program unit, sends described clear text to described application program unit, comprising:

Described socket unit sends the response for described Receive message request to described application program unit, carries described clear text in described response.

8. a service node, is characterized in that, comprising: socket unit and application program unit;

Described socket unit comprises:

Create subelement, for creating the first socket, described first socket is used for monitoring the first message, and described first message is the business route message belonging to the first business route-type, and described first message comprises business routing iinformation and clear text;

Determine subelement, determine that described SN receives described first message for described first socket created according to described establishment subelement;

Preserve subelement, for preserving the corresponding relation of described clear text and the second socket, wherein said second socket is corresponding with described business routing iinformation;

Receive subelement, for receiving Receive message request from the application program unit in described SN, described Receive message request is for asking the described clear text corresponding with described second socket;

Describedly determine subelement, the described corresponding relation also preserved for the described Receive message request that receives according to described reception subelement and described preservation subelement determines that described clear text is requested message;

Sending subelement, for the mode by sending to described application program unit for the response of described Receive message request, determining to described application program unit transmission is described the described clear text that subelement is determined.

9. service node according to claim 8,

Described reception subelement, also for receiving the processed message corresponding with described second socket from described application program unit, described processed message is processed described clear text by described application program unit and obtains;

Describedly determine subelement, also for according to described second socket corresponding with the described processed message that described reception subelement receives, determine described business routing iinformation;

Described transmission subelement, also for sending the second message to business router SR, described second message is the business route message comprising described processed message, and the business routing iinformation of described second message comprises the described described business routing iinformation that subelement is determined of determining.

10. service node according to claim 8 or claim 9,

Described establishment subelement, also for when described reception subelement receives described first message, if do not preserve described second socket in described preservation subelement, then creates described second socket;

Described preservation subelement, specifically for being added into described clear text in the message queue corresponding with described second socket that described establishment subelement creates.

11. service nodes according to claim 8 or claim 9,

Described preservation subelement, specifically for when described reception subelement receives described first message, if preserve described second socket in described preservation subelement, is then added into described clear text in the message queue corresponding with described second socket.

12.-11 arbitrary described service nodes according to Claim 8, is characterized in that,

Described transmission subelement, also for before receiving from the application program unit in described SN and comprising the Receive message request of described second socket, sends described second socket to described application program unit.

13.-12 arbitrary described service nodes according to Claim 8, is characterized in that,

Described transmission subelement, for sending the response for described Receive message request to described application program unit, carries the memory address of described clear text in described response;

Described application program unit, for according to described memory address, obtains described clear text.

14.-13 arbitrary described service nodes according to Claim 8, is characterized in that,

Described transmission subelement, for sending the response for described Receive message request to described application program unit, carries described clear text in described response.